Review - 1 Advisory Published – 5-5-22

Yesterday, CISA’s NCCIC-ICS published a control systems security advisory for products from Johnson Controls.

Johnson Controls Advisory - This advisory describes an unverified password change vulnerability in the Johnson Controls Metasys ADS/ADX/OAS Servers.

 

For more information on this advisory, including a brief look at services provided through CISA’s regional offices, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/1-advisory-published-5-5-22 - subscription required.